OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/password_manager/native_backend_gnome_x.h" | 5 #include "chrome/browser/password_manager/native_backend_gnome_x.h" |
6 | 6 |
7 #include <dlfcn.h> | 7 #include <dlfcn.h> |
8 #include <gnome-keyring.h> | 8 #include <gnome-keyring.h> |
9 | 9 |
10 #include <map> | 10 #include <map> |
11 #include <string> | 11 #include <string> |
12 #include <vector> | 12 #include <vector> |
13 | 13 |
14 #include "base/basictypes.h" | 14 #include "base/basictypes.h" |
15 #include "base/logging.h" | 15 #include "base/logging.h" |
16 #include "base/metrics/histogram.h" | |
17 #include "base/strings/string_number_conversions.h" | 16 #include "base/strings/string_number_conversions.h" |
18 #include "base/strings/string_piece.h" | 17 #include "base/strings/string_piece.h" |
19 #include "base/strings/string_util.h" | 18 #include "base/strings/string_util.h" |
20 #include "base/strings/stringprintf.h" | 19 #include "base/strings/stringprintf.h" |
21 #include "base/strings/utf_string_conversions.h" | 20 #include "base/strings/utf_string_conversions.h" |
22 #include "base/synchronization/waitable_event.h" | 21 #include "base/synchronization/waitable_event.h" |
23 #include "base/time/time.h" | 22 #include "base/time/time.h" |
24 #include "chrome/browser/password_manager/psl_matching_helper.h" | |
25 #include "components/autofill/core/common/password_form.h" | 23 #include "components/autofill/core/common/password_form.h" |
26 #include "content/public/browser/browser_thread.h" | 24 #include "content/public/browser/browser_thread.h" |
27 | 25 |
28 using autofill::PasswordForm; | 26 using autofill::PasswordForm; |
29 using base::UTF8ToUTF16; | 27 using base::UTF8ToUTF16; |
30 using base::UTF16ToUTF8; | 28 using base::UTF16ToUTF8; |
31 using content::BrowserThread; | 29 using content::BrowserThread; |
32 | 30 |
33 #define GNOME_KEYRING_DEFINE_POINTER(name) \ | 31 #define GNOME_KEYRING_DEFINE_POINTER(name) \ |
34 typeof(&::gnome_keyring_##name) GnomeKeyringLoader::gnome_keyring_##name; | 32 typeof(&::gnome_keyring_##name) GnomeKeyringLoader::gnome_keyring_##name; |
(...skipping 97 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
132 DCHECK(date_ok); | 130 DCHECK(date_ok); |
133 form->date_created = base::Time::FromTimeT(date_created); | 131 form->date_created = base::Time::FromTimeT(date_created); |
134 form->blacklisted_by_user = uint_attr_map["blacklisted_by_user"]; | 132 form->blacklisted_by_user = uint_attr_map["blacklisted_by_user"]; |
135 form->scheme = static_cast<PasswordForm::Scheme>(uint_attr_map["scheme"]); | 133 form->scheme = static_cast<PasswordForm::Scheme>(uint_attr_map["scheme"]); |
136 | 134 |
137 return form; | 135 return form; |
138 } | 136 } |
139 | 137 |
140 // Parse all the results from the given GList into a PasswordFormList, and free | 138 // Parse all the results from the given GList into a PasswordFormList, and free |
141 // the GList. PasswordForms are allocated on the heap, and should be deleted by | 139 // the GList. PasswordForms are allocated on the heap, and should be deleted by |
142 // the consumer. If not empty, |filter_by_signon_realm| is used to filter out | 140 // the consumer. |
143 // results -- only credentials with signon realms passing the PSL matching | |
144 // (done by |helper|) against |filter_by_signon_realm| will be kept. | |
145 void ConvertFormList(GList* found, | 141 void ConvertFormList(GList* found, |
146 const std::string& filter_by_signon_realm, | |
147 const PSLMatchingHelper& helper, | |
148 NativeBackendGnome::PasswordFormList* forms) { | 142 NativeBackendGnome::PasswordFormList* forms) { |
149 PSLMatchingHelper::PSLDomainMatchMetric psl_domain_match_metric = | |
150 PSLMatchingHelper::PSL_DOMAIN_MATCH_NONE; | |
151 for (GList* element = g_list_first(found); element != NULL; | 143 for (GList* element = g_list_first(found); element != NULL; |
152 element = g_list_next(element)) { | 144 element = g_list_next(element)) { |
153 GnomeKeyringFound* data = static_cast<GnomeKeyringFound*>(element->data); | 145 GnomeKeyringFound* data = static_cast<GnomeKeyringFound*>(element->data); |
154 GnomeKeyringAttributeList* attrs = data->attributes; | 146 GnomeKeyringAttributeList* attrs = data->attributes; |
155 | 147 |
156 PasswordForm* form = FormFromAttributes(attrs); | 148 PasswordForm* form = FormFromAttributes(attrs); |
157 if (form) { | 149 if (form) { |
158 if (!filter_by_signon_realm.empty() && | |
159 form->signon_realm != filter_by_signon_realm) { | |
160 // This is not an exact match, we try PSL matching. | |
161 if (!(PSLMatchingHelper::IsPublicSuffixDomainMatch( | |
162 filter_by_signon_realm, form->signon_realm))) { | |
163 continue; | |
164 } | |
165 psl_domain_match_metric = PSLMatchingHelper::PSL_DOMAIN_MATCH_FOUND; | |
166 form->original_signon_realm = form->signon_realm; | |
167 } | |
168 if (data->secret) { | 150 if (data->secret) { |
169 form->password_value = UTF8ToUTF16(data->secret); | 151 form->password_value = UTF8ToUTF16(data->secret); |
170 } else { | 152 } else { |
171 LOG(WARNING) << "Unable to access password from list element!"; | 153 LOG(WARNING) << "Unable to access password from list element!"; |
172 } | 154 } |
173 forms->push_back(form); | 155 forms->push_back(form); |
174 } else { | 156 } else { |
175 LOG(WARNING) << "Could not initialize PasswordForm from attributes!"; | 157 LOG(WARNING) << "Could not initialize PasswordForm from attributes!"; |
176 } | 158 } |
177 } | 159 } |
178 if (!filter_by_signon_realm.empty()) { | |
179 UMA_HISTOGRAM_ENUMERATION( | |
180 "PasswordManager.PslDomainMatchTriggering", | |
181 helper.IsMatchingEnabled() | |
182 ? psl_domain_match_metric | |
183 : PSLMatchingHelper::PSL_DOMAIN_MATCH_DISABLED, | |
184 PSLMatchingHelper::PSL_DOMAIN_MATCH_COUNT); | |
185 } | |
186 } | 160 } |
187 | 161 |
188 // Schema is analagous to the fields in PasswordForm. | 162 // Schema is analagous to the fields in PasswordForm. |
189 const GnomeKeyringPasswordSchema kGnomeSchema = { | 163 const GnomeKeyringPasswordSchema kGnomeSchema = { |
190 GNOME_KEYRING_ITEM_GENERIC_SECRET, { | 164 GNOME_KEYRING_ITEM_GENERIC_SECRET, { |
191 { "origin_url", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, | 165 { "origin_url", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, |
192 { "action_url", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, | 166 { "action_url", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, |
193 { "username_element", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, | 167 { "username_element", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, |
194 { "username_value", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, | 168 { "username_value", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, |
195 { "password_element", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, | 169 { "password_element", GNOME_KEYRING_ATTRIBUTE_TYPE_STRING }, |
(...skipping 73 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
269 | 243 |
270 // All these callbacks are called on UI thread. | 244 // All these callbacks are called on UI thread. |
271 static void OnOperationDone(GnomeKeyringResult result, gpointer data); | 245 static void OnOperationDone(GnomeKeyringResult result, gpointer data); |
272 | 246 |
273 static void OnOperationGetList(GnomeKeyringResult result, GList* list, | 247 static void OnOperationGetList(GnomeKeyringResult result, GList* list, |
274 gpointer data); | 248 gpointer data); |
275 | 249 |
276 base::WaitableEvent event_; | 250 base::WaitableEvent event_; |
277 GnomeKeyringResult result_; | 251 GnomeKeyringResult result_; |
278 NativeBackendGnome::PasswordFormList forms_; | 252 NativeBackendGnome::PasswordFormList forms_; |
279 // Two additional arguments to OnOperationGetList: | |
280 // If the credential search is related to a particular form, | |
281 // |original_signon_realm_| contains the signon realm of that form. It is used | |
282 // to filter the relevant results out of all the found ones. | |
283 std::string original_signon_realm_; | |
284 const PSLMatchingHelper helper_; | |
285 }; | 253 }; |
286 | 254 |
287 void GKRMethod::AddLogin(const PasswordForm& form, const char* app_string) { | 255 void GKRMethod::AddLogin(const PasswordForm& form, const char* app_string) { |
288 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); | 256 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); |
289 time_t date_created = form.date_created.ToTimeT(); | 257 time_t date_created = form.date_created.ToTimeT(); |
290 // If we are asked to save a password with 0 date, use the current time. | 258 // If we are asked to save a password with 0 date, use the current time. |
291 // We don't want to actually save passwords as though on January 1, 1970. | 259 // We don't want to actually save passwords as though on January 1, 1970. |
292 if (!date_created) | 260 if (!date_created) |
293 date_created = time(NULL); | 261 date_created = time(NULL); |
294 gnome_keyring_store_password( | 262 gnome_keyring_store_password( |
(...skipping 16 matching lines...) Expand all Loading... |
311 "date_created", base::Int64ToString(date_created).c_str(), | 279 "date_created", base::Int64ToString(date_created).c_str(), |
312 "blacklisted_by_user", form.blacklisted_by_user, | 280 "blacklisted_by_user", form.blacklisted_by_user, |
313 "scheme", form.scheme, | 281 "scheme", form.scheme, |
314 "application", app_string, | 282 "application", app_string, |
315 NULL); | 283 NULL); |
316 } | 284 } |
317 | 285 |
318 void GKRMethod::AddLoginSearch(const PasswordForm& form, | 286 void GKRMethod::AddLoginSearch(const PasswordForm& form, |
319 const char* app_string) { | 287 const char* app_string) { |
320 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); | 288 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); |
321 original_signon_realm_ = form.signon_realm; | |
322 // Search GNOME Keyring for matching passwords to update. | 289 // Search GNOME Keyring for matching passwords to update. |
323 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); | 290 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); |
324 AppendString(&attrs, "origin_url", form.origin.spec()); | 291 AppendString(&attrs, "origin_url", form.origin.spec()); |
325 AppendString(&attrs, "username_element", UTF16ToUTF8(form.username_element)); | 292 AppendString(&attrs, "username_element", UTF16ToUTF8(form.username_element)); |
326 AppendString(&attrs, "username_value", UTF16ToUTF8(form.username_value)); | 293 AppendString(&attrs, "username_value", UTF16ToUTF8(form.username_value)); |
327 AppendString(&attrs, "password_element", UTF16ToUTF8(form.password_element)); | 294 AppendString(&attrs, "password_element", UTF16ToUTF8(form.password_element)); |
328 AppendString(&attrs, "submit_element", UTF16ToUTF8(form.submit_element)); | 295 AppendString(&attrs, "submit_element", UTF16ToUTF8(form.submit_element)); |
329 AppendString(&attrs, "signon_realm", form.signon_realm); | 296 AppendString(&attrs, "signon_realm", form.signon_realm); |
330 AppendString(&attrs, "application", app_string); | 297 AppendString(&attrs, "application", app_string); |
331 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, | 298 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, |
332 attrs.get(), | 299 attrs.get(), |
333 OnOperationGetList, | 300 OnOperationGetList, |
334 /*data=*/this, | 301 /*data=*/this, |
335 /*destroy_data=*/NULL); | 302 /*destroy_data=*/NULL); |
336 } | 303 } |
337 | 304 |
338 void GKRMethod::UpdateLoginSearch(const PasswordForm& form, | 305 void GKRMethod::UpdateLoginSearch(const PasswordForm& form, |
339 const char* app_string) { | 306 const char* app_string) { |
340 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); | 307 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); |
341 original_signon_realm_ = form.signon_realm; | |
342 // Search GNOME Keyring for matching passwords to update. | 308 // Search GNOME Keyring for matching passwords to update. |
343 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); | 309 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); |
344 AppendString(&attrs, "origin_url", form.origin.spec()); | 310 AppendString(&attrs, "origin_url", form.origin.spec()); |
345 AppendString(&attrs, "username_element", UTF16ToUTF8(form.username_element)); | 311 AppendString(&attrs, "username_element", UTF16ToUTF8(form.username_element)); |
346 AppendString(&attrs, "username_value", UTF16ToUTF8(form.username_value)); | 312 AppendString(&attrs, "username_value", UTF16ToUTF8(form.username_value)); |
347 AppendString(&attrs, "password_element", UTF16ToUTF8(form.password_element)); | 313 AppendString(&attrs, "password_element", UTF16ToUTF8(form.password_element)); |
348 AppendString(&attrs, "signon_realm", form.signon_realm); | 314 AppendString(&attrs, "signon_realm", form.signon_realm); |
349 AppendString(&attrs, "application", app_string); | 315 AppendString(&attrs, "application", app_string); |
350 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, | 316 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, |
351 attrs.get(), | 317 attrs.get(), |
(...skipping 16 matching lines...) Expand all Loading... |
368 "username_value", UTF16ToUTF8(form.username_value).c_str(), | 334 "username_value", UTF16ToUTF8(form.username_value).c_str(), |
369 "password_element", UTF16ToUTF8(form.password_element).c_str(), | 335 "password_element", UTF16ToUTF8(form.password_element).c_str(), |
370 "submit_element", UTF16ToUTF8(form.submit_element).c_str(), | 336 "submit_element", UTF16ToUTF8(form.submit_element).c_str(), |
371 "signon_realm", form.signon_realm.c_str(), | 337 "signon_realm", form.signon_realm.c_str(), |
372 "application", app_string, | 338 "application", app_string, |
373 NULL); | 339 NULL); |
374 } | 340 } |
375 | 341 |
376 void GKRMethod::GetLogins(const PasswordForm& form, const char* app_string) { | 342 void GKRMethod::GetLogins(const PasswordForm& form, const char* app_string) { |
377 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); | 343 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); |
378 original_signon_realm_ = form.signon_realm; | |
379 // Search GNOME Keyring for matching passwords. | 344 // Search GNOME Keyring for matching passwords. |
380 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); | 345 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); |
381 if (!helper_.ShouldPSLDomainMatchingApply( | 346 AppendString(&attrs, "signon_realm", form.signon_realm); |
382 PSLMatchingHelper::GetRegistryControlledDomain( | |
383 GURL(form.signon_realm)))) { | |
384 AppendString(&attrs, "signon_realm", form.signon_realm); | |
385 } | |
386 AppendString(&attrs, "application", app_string); | 347 AppendString(&attrs, "application", app_string); |
387 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, | 348 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, |
388 attrs.get(), | 349 attrs.get(), |
389 OnOperationGetList, | 350 OnOperationGetList, |
390 /*data=*/this, | 351 /*data=*/this, |
391 /*destroy_data=*/NULL); | 352 /*destroy_data=*/NULL); |
392 } | 353 } |
393 | 354 |
394 void GKRMethod::GetLoginsList(uint32_t blacklisted_by_user, | 355 void GKRMethod::GetLoginsList(uint32_t blacklisted_by_user, |
395 const char* app_string) { | 356 const char* app_string) { |
396 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); | 357 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); |
397 original_signon_realm_.clear(); | |
398 // Search GNOME Keyring for matching passwords. | 358 // Search GNOME Keyring for matching passwords. |
399 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); | 359 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); |
400 AppendUint32(&attrs, "blacklisted_by_user", blacklisted_by_user); | 360 AppendUint32(&attrs, "blacklisted_by_user", blacklisted_by_user); |
401 AppendString(&attrs, "application", app_string); | 361 AppendString(&attrs, "application", app_string); |
402 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, | 362 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, |
403 attrs.get(), | 363 attrs.get(), |
404 OnOperationGetList, | 364 OnOperationGetList, |
405 /*data=*/this, | 365 /*data=*/this, |
406 /*destroy_data=*/NULL); | 366 /*destroy_data=*/NULL); |
407 } | 367 } |
408 | 368 |
409 void GKRMethod::GetAllLogins(const char* app_string) { | 369 void GKRMethod::GetAllLogins(const char* app_string) { |
410 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); | 370 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI)); |
411 original_signon_realm_.clear(); | |
412 // We need to search for something, otherwise we get no results - so | 371 // We need to search for something, otherwise we get no results - so |
413 // we search for the fixed application string. | 372 // we search for the fixed application string. |
414 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); | 373 ScopedAttributeList attrs(gnome_keyring_attribute_list_new()); |
415 AppendString(&attrs, "application", app_string); | 374 AppendString(&attrs, "application", app_string); |
416 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, | 375 gnome_keyring_find_items(GNOME_KEYRING_ITEM_GENERIC_SECRET, |
417 attrs.get(), | 376 attrs.get(), |
418 OnOperationGetList, | 377 OnOperationGetList, |
419 /*data=*/this, | 378 /*data=*/this, |
420 /*destroy_data=*/NULL); | 379 /*destroy_data=*/NULL); |
421 } | 380 } |
(...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
468 method->event_.Signal(); | 427 method->event_.Signal(); |
469 } | 428 } |
470 | 429 |
471 // static | 430 // static |
472 void GKRMethod::OnOperationGetList(GnomeKeyringResult result, GList* list, | 431 void GKRMethod::OnOperationGetList(GnomeKeyringResult result, GList* list, |
473 gpointer data) { | 432 gpointer data) { |
474 GKRMethod* method = static_cast<GKRMethod*>(data); | 433 GKRMethod* method = static_cast<GKRMethod*>(data); |
475 method->result_ = result; | 434 method->result_ = result; |
476 method->forms_.clear(); | 435 method->forms_.clear(); |
477 // |list| will be freed after this callback returns, so convert it now. | 436 // |list| will be freed after this callback returns, so convert it now. |
478 ConvertFormList( | 437 ConvertFormList(list, &method->forms_); |
479 list, method->original_signon_realm_, method->helper_, &method->forms_); | |
480 method->original_signon_realm_.clear(); | |
481 method->event_.Signal(); | 438 method->event_.Signal(); |
482 } | 439 } |
483 | 440 |
484 } // namespace | 441 } // namespace |
485 | 442 |
486 NativeBackendGnome::NativeBackendGnome(LocalProfileId id, PrefService* prefs) | 443 NativeBackendGnome::NativeBackendGnome(LocalProfileId id, PrefService* prefs) |
487 : profile_id_(id), prefs_(prefs) { | 444 : profile_id_(id), prefs_(prefs) { |
488 // TODO(mdm): after a few more releases, remove the code which is now dead due | 445 // TODO(mdm): after a few more releases, remove the code which is now dead due |
489 // to the true || here, and simplify this code. We don't do it yet to make it | 446 // to the true || here, and simplify this code. We don't do it yet to make it |
490 // easier to revert if necessary. | 447 // easier to revert if necessary. |
(...skipping 309 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
800 // Each other profile must be able to migrate the shared data as well, | 757 // Each other profile must be able to migrate the shared data as well, |
801 // so we must leave it alone. After a few releases, we'll add code to | 758 // so we must leave it alone. After a few releases, we'll add code to |
802 // delete them, and eventually remove this migration code. | 759 // delete them, and eventually remove this migration code. |
803 // TODO(mdm): follow through with the plan above. | 760 // TODO(mdm): follow through with the plan above. |
804 PasswordStoreX::SetPasswordsUseLocalProfileId(prefs_); | 761 PasswordStoreX::SetPasswordsUseLocalProfileId(prefs_); |
805 } else { | 762 } else { |
806 // We failed to migrate for some reason. Use the old app string. | 763 // We failed to migrate for some reason. Use the old app string. |
807 app_string_ = kGnomeKeyringAppString; | 764 app_string_ = kGnomeKeyringAppString; |
808 } | 765 } |
809 } | 766 } |
OLD | NEW |